Share via

Microsoft-Windows CAPI2 failed extract of third-party root list from auto update cab

Anonymous
2009-06-02T10:11:30+00:00

Hi, I get this error in the last few weeks and I am not sure, whether I should do something about it. I went to TechNet, Event ID 11 Automatic Root Certificates Update Configuration, but I would need something simpler that I can follow. Confuseduser P.S. Exact error message is below: -

Log Name:      Application

Source:        Microsoft-Windows-CAPI2

Date:          27/05/2009 8:42:16 PM

Event ID:      11

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      Helga-PC

Description:

Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />

    <EventID Qualifiers="49154">11</EventID>

    <Version>0</Version>

    <Level>2</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2009-05-27T10:42:16.000Z" />

    <EventRecordID>32381</EventRecordID>

    <Correlation />

    <Execution ProcessID="0" ThreadID="0" />

    <Channel>Application</Channel>

    <Computer>Helga-PC</Computer>

    <Security />

  </System>

  <EventData>

    <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>

    <Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

</Data>

  </EventData>

</Event>

Windows for home | Other | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
  1. Anonymous
    2009-10-20T11:32:58+00:00

    I don't see any reason the solution above would not work in Vista.  I see the same folder structure and registry entries on Vista. 

    If you are not familiar with the registry, here is a very detailed instruction set on how to delete entries:  http://support.microsoft.com/kb/136393

    Be sure to use the export option before deleting entries in order to back them up.

    2 people found this answer helpful.
    0 comments No comments
Answer accepted by question author
  1. Anonymous
    2010-02-26T21:34:07+00:00

    This does help.

    Now that you've pointed this out I've seen the same behaviour in the CAPI2 Event Viewer log file. My Windows 7 clients have been trying to access two URL's at the domain http://crl.microsoft.com/

    None of the posts I had seen on this had mentioned the need for this path.

    Thanks,

    Michael

    hi

    Here's a basic definition for CRL in general terms. You can search Google using "Certificate Revocation List" and find a lot more information.

    it could also be that direct X is looking for some updated drivers

    what happens is that your browser is checking for provoked certificates , is perfectly normal and safe , its to keep you safe

    have a nice day

    ps for some further info

    http://technet.microsoft.com/en-us/library/dd772269.aspx


    Scan with OneCare + 50 Windows 7even Tips + Plagued by the Privacy Center? REMOVE IT + Threat Research & Response Blog + Sysinternals Live tools + TRANSLATOR+ Photosynth + Microsoft Security + Microsoft SUPPORT + PIVOT from Live Labs+ Microsoft Live Labs + Office 2010 beta + Get Windows LIVE!

    0 comments No comments

138 additional answers

Sort by: Most helpful
  1. Anonymous
    2011-08-12T22:15:14+00:00

    Hi, Confuseduser,

    Thanks for pushing them and popping this issue.

    Disabling the WMP service did not help in my case, nor any of "tech support" suggests.

    What's really helped:

    1. Find in App event log something like the following:

    Failed auto update retrieval of third-party root certificate from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/A1DB6393916F17E4185509400415C70240B0AE6B.crt> with error: 12007 (0x2ee7).

    1. Download the certificate using that URL.

    But... Since the currently installed certificates do not allow to get the domain you might need to find a working box, download there and copy the .cer file to your box.

    1. Install the certificate (in my case in 3rd party root authority container).

    That's it!

    1 person found this answer helpful.
    0 comments No comments
  2. Anonymous
    2009-06-02T17:04:27+00:00

    Hi,

    Thank you for visiting Microsoft Answers forum.

    To resolve this issue, use the System File Checker tool (SFC.exe) to determine which file is causing the issue, and then replace the file. To do this, follow these steps:

    1. Open an elevated command prompt. To do this, click Start, click All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator. If you are prompted for an administrator password or for a confirmation, type the password, or click Allow.
    2. Type the following command, and then press ENTER:

    sfc /scannow

    The sfc /scannow command scans all protected system files and replaces incorrect versions with correct Microsoft versions.

    Also try the clean boot to check for 3party software problems.

    To help troubleshoot error messages and other issues, you can start Windows Vista by using a minimal set of drivers and startup programs. This kind of startup is known as a "clean boot." A clean boot helps eliminate software conflicts. This article describes how to troubleshoot problems in Windows Vista by performing a clean boot. This article also describes how to start the Windows Installer service and how to reset the computer so that it starts as usual.

    Note When you perform a clean boot, you may temporarily lose some functionality. When you start the computer as usual, the functionality returns. However, you may receive the original error message, or you may experience the original behavior.

    a.             Log on to the computer by using an account that has administrator rights.

    b.     Click StartCollapse this image Expand this image , type msconfig.exe in the Start Searchbox, and then press ENTER to start the System Configuration Utility.

    Collapse this image Expand this image If you are prompted for an administrator password or for confirmation, type your password, or click Continue.

    c.             On the Generaltab, click Selective Startup, and then click to clear the Load startup itemscheck box. (The Use Original Boot.inicheck box is unavailable.)

    d.     On the Servicestab, click to select the Hide all Microsoft servicescheck box, and then click Disable all.

    Note Following this step lets Microsoft services continue to run. These services include Networking, Plug and Play, Event Logging, Error Reporting, and other services. If you disable these services, you may permanently delete all restore points. Do not do this if you want to use the System Restore utility together with existing restore points.

    e.     Click OK, and then click Restart.

    Step 2: Enable half of the services ****

    a.             Follow steps 1a and 1b to start the System Configuration utility.

    b.     Click the Servicestab, and then click to select the Hide all Microsoft servicescheck box.

    c.     Click to select half of the check boxes in the Servicelist.

    d.     Click OK, and then click Restart.

    Step 3: Determine whether the problem returns ****

    If the problem still occurs, repeat step 1 and step 2. In step 2, click to clear half of the check boxes that you originally selected in the Servicelist.

    If the problem does not occur, repeat step 1 and step 2. In step 2, select only half of the remaining check boxes that are cleared in the Servicelist. Repeat these steps until you have selected all the check boxes.

    If only one service is selected in the Servicelist, and you still experience the problem, the selected service causes the problem. Go to step 6. If no service causes this problem, go to step 4.

    Step 4: Enable half of the Startup items

    a.             Perform a clean boot by repeating step 1.

    b.     Click the Startuptab, and then click to select half of the check boxes in the Startup Itemlist.

    c.     Click OK, and then click Restart.

    Step 5: Determine whether the problem returns ****

    If the problem still occurs, repeat step 1 and step 4. In step 4, click to clear half of the check boxes that you originally selected in the Startup Itemlist.

    If the problem does not occur, repeat step 1 and step 4. In step 4, select only half of the remaining check boxes that are cleared in the Startup Itemlist. Repeat these steps until you have selected all the check boxes.

    If only one startup item is selected in the Startup Itemlist, and you still experience the problem, the startup item that is selected in the list is the service that is causing the problem. Go to step 6.

    If no startup item causes this problem, a Microsoft service most likely causes the problem. To determine which Microsoft service may be causing the problem, repeat step 1 and step 2 without selecting the Hide all Microsoft servicescheck box in either step.

    Step 6: Resolve the problem

    After you determine the startup item or the service that causes the problem, contact the program manufacturer to determine whether the problem can be resolved. Or, run the System Configuration Utility, and then click to clear the check box for the problem item.

    Step 7: Reset the computer to start as usual ****

    After you have finished troubleshooting, follow these steps to reset the computer to start as usual:

    Click StartCollapse this image Expand this image , type msconfig.exe in theStart Search box, and then press ENTER.

    Collapse this image Expand this image If you are prompted for an administrator password or for confirmation, type your password, or click Continue.

    On the Generaltab, click the Normal Startupoption, and then click OK.

    When you are prompted to restart the computer, click Restart.

    Hope this helps :)


    Martin

    Microsoft Answers Support Engineer

    Visit ourMicrosoft Answers Feedback Forumand let us know what you think

    0 comments No comments
  3. Anonymous
    2009-06-02T12:53:56+00:00

    My system (Vista Home Prem, updated to SP2) is reporting this too.

    Also my system is hanging, today apparently forever, on a empty blue screen during the start-up sequence.  Today I had to use ctl-alt-del to get control and then restart.  Previously it just displayed the empty blue screen for a few seconds during boot.  This all started, I think, after the SP2 update.

    The first occurrence of the above error is May 27 in my Vista's 'error viewer' log.  It appears from the log that SP2 was installed on my system on May 27 (eg., lots of 'servicing' events).

    I'm wondering if the root sert problem above is causing part of the update to fail, so it keeps repeating every time I boot.  Maybe the pause is it trying to reach the internet.

    In any case, I'm looking forward to a reply to the question in the first post of this thread.

    0 comments No comments